| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 106.54.62.203 | 31337 | C2 | Sliver | — | — | CN | AS45090 | 2026-09-01 | 2026-09-01 |
| 101.126.90.250 | 31337 | C2 | Sliver | — | — | CN | AS137718 | 2026-09-01 | 2026-09-01 |
| 104.168.115.89 | 4550 | C2 | Remcos | — | — | US | AS36352 | 2026-09-01 | 2026-09-07 |
| 45.74.7.184 | 4332 | C2 | Remcos | — | — | US | AS202412 | 2026-09-01 | 2026-09-07 |
| 104.168.115.89 | 4553 | C2 | Remcos | — | — | US | AS36352 | 2026-09-01 | 2026-09-07 |
| 104.168.115.89 | 4551 | C2 | Remcos | — | — | US | AS36352 | 2026-09-01 | 2026-09-07 |
| 109.233.21.109 | 31337 | C2 | Sliver | — | — | LB | AS48847 | 2026-09-01 | 2026-09-01 |
| 139.162.1.199 | 31337 | C2 | Sliver | — | — | NL | AS63949 | 2026-09-01 | 2026-09-01 |
| 122.114.10.199 | 31337 | C2 | Sliver | — | — | CN | AS4837 | 2026-09-01 | 2026-09-01 |
| 143.198.125.30 | 31337 | C2 | Sliver | — | — | US | AS14061 | 2026-09-01 | 2026-09-01 |
| 170.64.162.117 | 31337 | C2 | Sliver | — | — | US | AS14061 | 2026-09-01 | 2026-09-01 |
| 163.172.45.158 | 31337 | C2 | Sliver | — | — | FR | AS12876 | 2026-09-01 | 2026-09-01 |
| 154.93.103.232 | 31337 | C2 | Sliver | — | — | SC | AS138915 | 2026-09-01 | 2026-09-01 |
| 185.130.46.43 | 31337 | C2 | Sliver | — | — | BZ | AS210083 | 2026-09-01 | 2026-09-01 |
| 185.246.220.204 | 31337 | C2 | Sliver | — | — | BG | AS41745 | 2026-09-01 | 2026-09-01 |
| 203.12.31.156 | 31337 | C2 | Sliver | — | — | SE | AS210083 | 2026-09-01 | 2026-09-01 |
| 187.145.56.252 | 31337 | C2 | Sliver | — | — | MX | AS8151 | 2026-09-01 | 2026-09-01 |
| 161.35.173.98 | 8443 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-09-01 | — |
| 45.221.118.38 | 8080 | C2 | Cobalt Strike | — | — | ZA | AS55933 | 2026-09-01 | 2026-09-02 |
| 77.83.36.163 | 8443 | C2 | Cobalt Strike | — | — | UA | AS214403 | 2026-09-01 | — |
| 23.148.212.176 | 22 | C2 | Cobalt Strike | — | — | US | AS62468 | 2026-09-01 | — |
| 23.148.212.176 | 8080 | C2 | Cobalt Strike | — | — | US | AS62468 | 2026-09-01 | — |
| 23.148.212.176 | 443 | C2 | Cobalt Strike | — | — | US | AS62468 | 2026-09-01 | — |
| 23.148.212.176 | 80 | C2 | Cobalt Strike | — | — | US | AS62468 | 2026-09-01 | 2026-09-07 |
| 124.222.145.172 | 4369 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-01 | — |
| 107.174.14.102 | 9999 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-09-01 | 2026-09-07 |
| 107.174.14.102 | 443 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-09-01 | 2026-09-07 |
| 176.98.182.218 | 12345 | C2 | Aisuru | — | — | SG | AS198855 | 2026-09-01 | 2026-09-05 |
| 64.89.160.127 | 2891 | C2 | Remcos | — | — | US | AS205759 | 2026-09-01 | — |
| 155.103.70.232 | 14555 | C2 | Remcos | — | — | US | AS44382 | 2026-09-01 | 2026-09-07 |
| 165.22.191.159 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | — |
| 188.166.146.72 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 139.59.178.162 | 8001 | C2 | Aisuru | — | — | SG | AS14061 | 2026-09-01 | 2026-09-07 |
| 206.189.127.191 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 134.122.68.91 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 178.128.173.150 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 164.90.172.4 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 164.90.234.119 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 178.128.36.32 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 138.68.169.201 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 167.71.54.89 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 195.177.94.101 | 110 | C2 | AsyncRAT | — | — | UA | AS214961 | 2026-09-01 | 2026-09-07 |
| 185.99.135.19 | 443 | C2 | AsyncRAT | — | — | US | AS60781 | 2026-09-01 | — |
| 36.133.104.91 | 8080 | C2 | Cobalt Strike | — | — | CN | AS9808 | 2026-09-01 | — |
| 36.133.104.91 | 80 | C2 | Cobalt Strike | — | — | CN | AS9808 | 2026-09-01 | — |
| 36.133.104.91 | 443 | C2 | Cobalt Strike | — | — | CN | AS9808 | 2026-09-01 | — |
| 88.119.169.216 | 9090 | C2 | Havoc | — | — | LT | AS61272 | 2026-09-01 | 2026-09-07 |
| 88.119.169.216 | 4321 | C2 | AdaptixC2 | — | — | LT | AS61272 | 2026-09-01 | 2026-09-07 |
| 80.190.77.86 | 20800 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-09-01 | 2026-09-07 |
| 69.167.41.16 | 7000 | C2 | DCRat | — | — | US | AS40861 | 2026-09-01 | 2026-09-07 |